CVE-2026-45592Patch(microsoft / windows_10_1607)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow or wraparound in Windows Internet (wininet.dll) allows an authorized attacker to elevate privileges locally.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-190CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-06-09); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016

1 version affected across 13 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-09: 1Mentions · 2026-06-12: 1Patch / Workaround · 2026-06-09: 1Patch / Workaround · 2026-06-12: 1Technical Details · 2026-06-09: 1Technical Details · 2026-06-12: 106-0906-12
Signal classification1 categories
Patch
2100.0%
Referenced assets1 URL
Full discourse2 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH SEVERITY: CVE-2026-45592 (CVSS 7.8) Integer overflow in Windows wininet[.]dll enables local privilege escalation. Authorized attackers can elevate to SYSTEM. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/4prrLyjM3e

    Post summary

    The tweet announces CVE-2026-45592, a high-severity integer overflow that permits local privilege escalation on Windows, and urges immediate patching.

    0000037
    44 followersView on X
  • WindowsForum@windowsforum
    Patch

    🪟 WinINet EoP (CVE-2026-45592) is Microsoft’s reminder that “just plumbing” can still hand attackers admin. Patch June. If you don’t, Windows will. #Windows #Microsoft https://windowsforum.com/threads/cve-2026-45592-wininet-eop-why-the-june-patch-for-windows-must-be-priority.424462/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #PrivilegeEscalation #Wininet #PatchTuesday #WindowsSecurityUpdate https://t.co/rPKhO3F03s

    Post summary

    Microsoft issues a patch reminder for the WinINET Elevation of Privilege vulnerability (CVE-2026-45592), urging users to apply the June update to prevent attackers from gaining administrative rights.

    0000037
    1.2K followersView on X
CPE platform detail23 entries

23 of 23 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_23h2--arm64
OSmicrosoftwindows_11_23h2--x64
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025--x64

Explore more